@sebastienrousseau/crypto-server 0.0.9 → 0.0.24

package/dist/config/auth-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-policy.d.ts","sourceRoot":"","sources":["../../src/config/auth-policy.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAGhD,MAAM,WAAW,SAAS;IAMxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAEpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAQD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CAUpE;AAMD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAO3D;AAUD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CAgBrE;AAOD,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAY7C,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA6DxD,CAAC;AAMH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAElD;AAMD,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,SAAS,CAGpB;AAGD,MAAM,WAAW,eAAe;IAE9B,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE1B,GAAG,EAAE,MAAM,CAAC;CACb;AAMD,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,EAAE,CAY3E;AAOD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,IAAI,CAO5E"}
+{"version":3,"file":"auth-policy.d.ts","sourceRoot":"","sources":["../../src/config/auth-policy.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAGhD,MAAM,WAAW,SAAS;IAMxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAEpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAQD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CAUpE;AAMD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAO3D;AAUD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CAgBrE;AAOD,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAY7C,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiFxD,CAAC;AAOH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAIlD;AAMD,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,SAAS,CAGpB;AAGD,MAAM,WAAW,eAAe;IAE9B,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE1B,GAAG,EAAE,MAAM,CAAC;CACb;AAMD,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,EAAE,CAY3E;AAOD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,IAAI,CAO5E"}

package/dist/config/auth-policy.js

@@ -66,6 +66,8 @@ exports.ROUTE_SCOPES = Object.freeze({
     "POST /v2/multi-recipient/encrypt": "crypto:encrypt",
     "POST /v2/pq/encapsulate": "crypto:encrypt",
     "POST /v2/pq/hybrid/encapsulate": "crypto:encrypt",
+    "POST /v2/stream/pq-encrypt": "crypto:encrypt",
+    "POST /v2/stream/multi-pq-encrypt": "crypto:encrypt",
     "POST /v2/decrypt": "crypto:decrypt",
     "POST /v2/secretbox/open": "crypto:decrypt",
     "POST /v2/sealedbox/open": "crypto:decrypt",
@@ -73,6 +75,8 @@ exports.ROUTE_SCOPES = Object.freeze({
     "POST /v2/password/decrypt": "crypto:decrypt",
     "POST /v2/pq/decapsulate": "crypto:decrypt",
     "POST /v2/pq/hybrid/decapsulate": "crypto:decrypt",
+    "POST /v2/stream/pq-decrypt": "crypto:decrypt",
+    "POST /v2/stream/multi-pq-decrypt": "crypto:decrypt",
     "POST /v2/sign": "crypto:sign",
     "POST /v2/stream/sign": "crypto:sign",
     "POST /v2/pq/dsa/sign": "crypto:sign",
@@ -96,9 +100,22 @@ exports.ROUTE_SCOPES = Object.freeze({
     "POST /v2/pq/hybrid/keygen": "crypto:keys",
     "POST /v2/pq/dsa/keygen": "crypto:keys",
     "POST /v2/pq/slh-dsa/keygen": "crypto:keys",
+    "POST /v2/opaque/register/init": exports.AUTHENTICATED,
+    "POST /v2/opaque/register/finish": exports.AUTHENTICATED,
+    "POST /v2/opaque/login/init": exports.AUTHENTICATED,
+    "POST /v2/opaque/login/finish": exports.AUTHENTICATED,
+    "POST /v2/hpke/keygen": "crypto:keys",
+    "POST /v2/hpke/seal": "crypto:encrypt",
+    "POST /v2/hpke/open": "crypto:decrypt",
+    "POST /v2/kms/create-key": "crypto:keys",
+    "POST /v2/kms/wrap": "crypto:keys",
+    "POST /v2/kms/unwrap": "crypto:keys",
+    "POST /v2/kms/generate-data-key": "crypto:keys",
+    "POST /v2/kms/encrypt": "crypto:encrypt",
+    "POST /v2/kms/decrypt": "crypto:decrypt",
 });
 function isPublicRoute(url) {
-    return (0, constants_1.isProbePath)(url) || url.startsWith("/docs");
+    return ((0, constants_1.isProbePath)(url) || url.startsWith("/docs") || url.startsWith("/v2/opaque"));
 }
 function routeRequirement(method, url) {
     const verb = method === "HEAD" ? "GET" : method;

package/dist/config/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/config/constants.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAQ5D,eAAO,MAAM,WAAW,QAA+B,CAAC;AAMxD,eAAO,MAAM,IAAI,QAAqC,CAAC;AAMvD,eAAO,MAAM,IAAI,iBAA8B,CAAC;AAMhD,eAAO,MAAM,QAAQ,QAAoC,CAAC;AAsB1D,eAAO,MAAM,aAAa,UAMzB,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,oBAa5B,CAAC;AAOF,eAAO,MAAM,eAAe,EAAE,sBAM7B,CAAC;AAOF,eAAO,MAAM,aAAa,EAAE,oBAG3B,CAAC;AAOF,eAAO,MAAM,WAAW,EAAE,kBAOzB,CAAC;AAOF,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAK1C,CAAC;AAKH,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,OACN,CAAC;AAMrC,eAAO,MAAM,gBAAgB;;;;qBAgBV;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAG,OAAO;;;;;;;;8BAiBnC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE;YAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;SAAE,CAAA;KAAE,WAChD;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;;;;;;;;CAoB3E,CAAC;AAOF,eAAO,MAAM,mBAAmB,QAAO,MAKtC,CAAC;AAMF,eAAO,MAAM,kBAAkB;;;CAK9B,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/config/constants.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAQ5D,eAAO,MAAM,WAAW,QAA+B,CAAC;AAMxD,eAAO,MAAM,IAAI,QAAqC,CAAC;AAMvD,eAAO,MAAM,IAAI,iBAA8B,CAAC;AAMhD,eAAO,MAAM,QAAQ,QAAoC,CAAC;AAsB1D,eAAO,MAAM,aAAa,UAMzB,CAAC;AAMF,eAAO,MAAM,cAAc,EAAE,oBAa5B,CAAC;AAOF,eAAO,MAAM,eAAe,EAAE,sBAM7B,CAAC;AAOF,eAAO,MAAM,aAAa,EAAE,oBAG3B,CAAC;AAOF,eAAO,MAAM,WAAW,EAAE,kBAazB,CAAC;AAOF,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAK1C,CAAC;AAKH,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,OACN,CAAC;AAMrC,eAAO,MAAM,gBAAgB;;;;qBAgBV;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAG,OAAO;;;;;;;;8BAiBnC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE;YAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;SAAE,CAAA;KAAE,WAChD;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;;;;;;;;CAoB3E,CAAC;AAOF,eAAO,MAAM,mBAAmB,QAAO,MAKtC,CAAC;AAMF,eAAO,MAAM,kBAAkB;;;CAK9B,CAAC"}

package/dist/config/constants.js

@@ -52,7 +52,13 @@ exports.corsOptions = {
         ? process.env["CORS_ORIGIN"].split(",").map((o) => o.trim())
         : false,
     methods: ["GET", "POST"],
-    allowedHeaders: ["Content-Type", "x-api-key"],
+    allowedHeaders: [
+        "Content-Type",
+        "x-api-key",
+        "Authorization",
+        "x-request-id",
+        "traceparent",
+    ],
     credentials: true,
 };
 exports.PROBE_PATHS = new Set([

package/dist/lib/key-store.d.ts

@@ -15,11 +15,18 @@ export declare class KeyStoreError extends Error {
     readonly code: string;
     constructor(message: string, statusCode: number, code: string);
 }
+export interface EncryptedPartsPayload {
+    readonly ciphertext: string;
+    readonly iv: string;
+    readonly tag: string;
+    readonly alg: "aes-256-gcm";
+}
 export declare class KeyStore {
     private readonly dir;
     private readonly capacity;
     private readonly keys;
-    constructor(dir: string | undefined, capacity?: number);
+    private readonly storageKey;
+    constructor(dir: string | undefined, capacity?: number, storageKey?: string | Uint8Array);
     put(key: NewKey): Promise<StoredKey>;
     get(keyId: string, owner: string, algorithms?: readonly string[]): Promise<StoredKey>;
     private lookup;

package/dist/lib/key-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key-store.d.ts","sourceRoot":"","sources":["../../src/lib/key-store.ts"],"names":[],"mappings":"AA6BA,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAGxD,MAAM,WAAW,SAAS;IAExB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;IAE/B,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC;CACjC;AAGD,MAAM,MAAM,MAAM,GAAG,IAAI,CACvB,SAAS,EACT,WAAW,GAAG,OAAO,GAAG,aAAa,GAAG,cAAc,CACvD,CAAC;AAGF,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAKtD,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAG3C,qBAAa,aAAc,SAAQ,KAAK;IAEtC,SAAgB,UAAU,EAAE,MAAM,CAAC;IAEnC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAM9D;AAOD,qBAAa,QAAQ;IAUjB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAV3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;gBASlC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,GAAE,MAA6B;IAIpD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IA6BpC,GAAG,CACP,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAC7B,OAAO,CAAC,SAAS,CAAC;YAcP,MAAM;IAiBpB,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,IAAI;CAGb;AAGD,wBAAgB,eAAe,IAAI,QAAQ,CAE1C"}
+{"version":3,"file":"key-store.d.ts","sourceRoot":"","sources":["../../src/lib/key-store.ts"],"names":[],"mappings":"AAmCA,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAGxD,MAAM,WAAW,SAAS;IAExB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;IAE/B,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC;CACjC;AAGD,MAAM,MAAM,MAAM,GAAG,IAAI,CACvB,SAAS,EACT,WAAW,GAAG,OAAO,GAAG,aAAa,GAAG,cAAc,CACvD,CAAC;AAGF,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAKtD,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAG3C,qBAAa,aAAc,SAAQ,KAAK;IAEtC,SAAgB,UAAU,EAAE,MAAM,CAAC;IAEnC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAM9D;AAGD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;CAC7B;AAmFD,qBAAa,QAAQ;IAajB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAb3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;gBAW7B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,GAAE,MAA6B,EACxD,UAAU,CAAC,EAAE,MAAM,GAAG,UAAU;IAM5B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAgDpC,GAAG,CACP,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAC7B,OAAO,CAAC,SAAS,CAAC;YAcP,MAAM;IAwDpB,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,IAAI;CAGb;AAGD,wBAAgB,eAAe,IAAI,QAAQ,CAM1C"}

package/dist/lib/key-store.js

@@ -38,6 +38,7 @@ exports.keyStoreFromEnv = keyStoreFromEnv;
 const crypto_1 = require("crypto");
 const promises_1 = require("fs/promises");
 const path = __importStar(require("path"));
+const crypto_lib_1 = require("@sebastienrousseau/crypto-lib");
 exports.KEY_ID_PATTERN = "^k_[A-Za-z0-9_-]{22}$";
 const KEY_ID_RE = new RegExp(exports.KEY_ID_PATTERN);
 exports.DEFAULT_KEY_CAPACITY = 10_000;
@@ -52,14 +53,70 @@ class KeyStoreError extends Error {
     }
 }
 exports.KeyStoreError = KeyStoreError;
+function resolveStorageKey(key) {
+    if (!key)
+        return undefined;
+    if (typeof key !== "string") {
+        if (key.length === 32)
+            return Buffer.from(key);
+        return (0, crypto_1.createHash)("sha256").update(key).digest();
+    }
+    const trimmed = key.trim();
+    if (!trimmed)
+        return undefined;
+    if (/^[0-9a-fA-F]{64}$/.test(trimmed)) {
+        return Buffer.from(trimmed, "hex");
+    }
+    return (0, crypto_1.createHash)("sha256").update(trimmed, "utf8").digest();
+}
+function encryptPrivateParts(privateParts, keyId, owner, key) {
+    const iv = (0, crypto_1.randomBytes)(12);
+    const cipher = (0, crypto_1.createCipheriv)("aes-256-gcm", key, iv);
+    cipher.setAAD(Buffer.from(`${keyId}:${owner}`, "utf8"));
+    const plaintext = Buffer.from(JSON.stringify(privateParts), "utf8");
+    const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    (0, crypto_lib_1.wipeMemory)(plaintext);
+    return {
+        ciphertext: ciphertext.toString("base64"),
+        iv: iv.toString("base64"),
+        tag: tag.toString("base64"),
+        alg: "aes-256-gcm",
+    };
+}
+function decryptPrivateParts(encrypted, keyId, owner, key) {
+    if (encrypted.alg !== "aes-256-gcm") {
+        throw new KeyStoreError(`Unsupported encryption algorithm: ${encrypted.alg}`, 500, "UNSUPPORTED_STORAGE_ALGORITHM");
+    }
+    try {
+        const iv = Buffer.from(encrypted.iv, "base64");
+        const tag = Buffer.from(encrypted.tag, "base64");
+        const ciphertext = Buffer.from(encrypted.ciphertext, "base64");
+        const decipher = (0, crypto_1.createDecipheriv)("aes-256-gcm", key, iv);
+        decipher.setAAD(Buffer.from(`${keyId}:${owner}`, "utf8"));
+        decipher.setAuthTag(tag);
+        const decrypted = Buffer.concat([
+            decipher.update(ciphertext),
+            decipher.final(),
+        ]);
+        const parsed = JSON.parse(decrypted.toString("utf8"));
+        (0, crypto_lib_1.wipeMemory)(decrypted);
+        return parsed;
+    }
+    catch {
+        throw new KeyStoreError("Failed to decrypt key material: invalid key or corrupted data", 500, "KEY_INTEGRITY_FAILED");
+    }
+}
 const notFound = () => new KeyStoreError("Key not found", 404, "KEY_NOT_FOUND");
 class KeyStore {
     dir;
     capacity;
     keys = new Map();
-    constructor(dir, capacity = exports.DEFAULT_KEY_CAPACITY) {
+    storageKey;
+    constructor(dir, capacity = exports.DEFAULT_KEY_CAPACITY, storageKey) {
         this.dir = dir;
         this.capacity = capacity;
+        this.storageKey = resolveStorageKey(storageKey);
     }
     async put(key) {
         if (!this.dir && this.keys.size >= this.capacity) {
@@ -71,7 +128,20 @@ class KeyStore {
             createdAt: new Date().toISOString(),
         });
         if (this.dir) {
-            await (0, promises_1.writeFile)(this.file(stored.keyId), JSON.stringify(stored), {
+            const diskRecord = {
+                keyId: stored.keyId,
+                algorithm: stored.algorithm,
+                owner: stored.owner,
+                createdAt: stored.createdAt,
+                publicParts: stored.publicParts,
+            };
+            if (this.storageKey) {
+                diskRecord.encryptedPrivateParts = encryptPrivateParts(stored.privateParts, stored.keyId, stored.owner, this.storageKey);
+            }
+            else {
+                diskRecord.privateParts = stored.privateParts;
+            }
+            await (0, promises_1.writeFile)(this.file(stored.keyId), JSON.stringify(diskRecord), {
                 encoding: "utf8",
                 mode: 0o600,
                 flag: "wx",
@@ -102,9 +172,36 @@ class KeyStore {
         catch {
             return undefined;
         }
-        const stored = Object.freeze(JSON.parse(raw));
-        if (stored.keyId !== keyId)
+        let record;
+        try {
+            record = JSON.parse(raw);
+        }
+        catch {
             return undefined;
+        }
+        if (record.keyId !== keyId)
+            return undefined;
+        let privateParts;
+        if (record.encryptedPrivateParts) {
+            if (!this.storageKey) {
+                throw new KeyStoreError("Key is encrypted at rest; storage key required", 500, "STORAGE_KEY_REQUIRED");
+            }
+            privateParts = decryptPrivateParts(record.encryptedPrivateParts, record.keyId, record.owner, this.storageKey);
+        }
+        else if (record.privateParts) {
+            privateParts = record.privateParts;
+        }
+        else {
+            throw new KeyStoreError("Key file contains no private key material", 500, "KEY_CORRUPTED");
+        }
+        const stored = Object.freeze({
+            keyId: record.keyId,
+            algorithm: record.algorithm,
+            owner: record.owner,
+            createdAt: record.createdAt,
+            publicParts: record.publicParts,
+            privateParts,
+        });
         this.remember(stored);
         return stored;
     }
@@ -121,6 +218,6 @@ class KeyStore {
 }
 exports.KeyStore = KeyStore;
 function keyStoreFromEnv() {
-    return new KeyStore(process.env["CRYPTO_KEY_OUT_DIR"] || undefined);
+    return new KeyStore(process.env["CRYPTO_KEY_OUT_DIR"] || undefined, exports.DEFAULT_KEY_CAPACITY, process.env["CRYPTO_KEY_STORAGE_KEY"] || undefined);
 }
 //# sourceMappingURL=key-store.js.map

package/dist/lib/opaque-store.d.ts

@@ -0,0 +1,34 @@
+import { protocols } from "@sebastienrousseau/crypto-lib";
+type SuiteId = protocols.pake.SuiteId;
+type ServerSetup = protocols.pake.ServerSetup;
+type RegistrationRecord = protocols.pake.RegistrationRecord;
+type ServerLoginState = protocols.pake.ServerLoginState;
+export declare const DEFAULT_OPAQUE_SESSION_TTL_MS: number;
+export interface OpaqueActiveSession {
+    readonly serverState: ServerLoginState;
+    readonly credentialIdentifier: string;
+    readonly suite: SuiteId;
+    readonly expiresAt: number;
+}
+export declare class OpaqueStore {
+    private readonly setups;
+    private readonly fakeRecords;
+    private readonly records;
+    private readonly sessions;
+    getSetup(suite?: SuiteId): ServerSetup;
+    getFakeRecord(suite?: SuiteId): RegistrationRecord;
+    setRecord(credentialIdentifier: string, record: RegistrationRecord): void;
+    getRecord(credentialIdentifier: string): RegistrationRecord | undefined;
+    hasRecord(credentialIdentifier: string): boolean;
+    createSession(credentialIdentifier: string, serverState: ServerLoginState, suite?: SuiteId, ttlMs?: number): string;
+    consumeSession(sessionId: string): OpaqueActiveSession | undefined;
+    cleanExpiredSessions(): void;
+    clear(): void;
+}
+declare module "fastify" {
+    interface FastifyInstance {
+        opaqueStore: OpaqueStore;
+    }
+}
+export {};
+//# sourceMappingURL=opaque-store.d.ts.map

package/dist/lib/opaque-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opaque-store.d.ts","sourceRoot":"","sources":["../../src/lib/opaque-store.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE1D,KAAK,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AACtC,KAAK,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;AAC9C,KAAK,kBAAkB,GAAG,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC;AAC5D,KAAK,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC;AAKxD,eAAO,MAAM,6BAA6B,QAAgB,CAAC;AAG3D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAGD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0C;IACtE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;IACjE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0C;IAMnE,QAAQ,CAAC,KAAK,GAAE,OAAuB,GAAG,WAAW;IAarD,aAAa,CAAC,KAAK,GAAE,OAAuB,GAAG,kBAAkB;IAUjE,SAAS,CAAC,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAKzE,SAAS,CAAC,oBAAoB,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAKvE,SAAS,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO;IAKhD,aAAa,CACX,oBAAoB,EAAE,MAAM,EAC5B,WAAW,EAAE,gBAAgB,EAC7B,KAAK,GAAE,OAAuB,EAC9B,KAAK,GAAE,MAAsC,GAC5C,MAAM;IAgBT,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IASlE,oBAAoB,IAAI,IAAI;IAU5B,KAAK,IAAI,IAAI;CAId;AAED,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QAEvB,WAAW,EAAE,WAAW,CAAC;KAC1B;CACF"}

package/dist/lib/opaque-store.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpaqueStore = exports.DEFAULT_OPAQUE_SESSION_TTL_MS = void 0;
+const node_crypto_1 = require("node:crypto");
+const crypto_lib_1 = require("@sebastienrousseau/crypto-lib");
+const { pake } = crypto_lib_1.protocols;
+exports.DEFAULT_OPAQUE_SESSION_TTL_MS = 5 * 60 * 1000;
+class OpaqueStore {
+    setups = new Map();
+    fakeRecords = new Map();
+    records = new Map();
+    sessions = new Map();
+    getSetup(suite = "P256-SHA256") {
+        let setup = this.setups.get(suite);
+        if (!setup) {
+            setup = pake.createServerSetup({ suite });
+            this.setups.set(suite, setup);
+        }
+        return setup;
+    }
+    getFakeRecord(suite = "P256-SHA256") {
+        let fake = this.fakeRecords.get(suite);
+        if (!fake) {
+            fake = pake.createFakeRecord({ suite });
+            this.fakeRecords.set(suite, fake);
+        }
+        return fake;
+    }
+    setRecord(credentialIdentifier, record) {
+        this.records.set(credentialIdentifier, record);
+    }
+    getRecord(credentialIdentifier) {
+        return this.records.get(credentialIdentifier);
+    }
+    hasRecord(credentialIdentifier) {
+        return this.records.has(credentialIdentifier);
+    }
+    createSession(credentialIdentifier, serverState, suite = "P256-SHA256", ttlMs = exports.DEFAULT_OPAQUE_SESSION_TTL_MS) {
+        this.cleanExpiredSessions();
+        const sessionId = (0, node_crypto_1.randomUUID)();
+        this.sessions.set(sessionId, {
+            serverState,
+            credentialIdentifier,
+            suite,
+            expiresAt: Date.now() + ttlMs,
+        });
+        return sessionId;
+    }
+    consumeSession(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return undefined;
+        this.sessions.delete(sessionId);
+        if (Date.now() > session.expiresAt)
+            return undefined;
+        return session;
+    }
+    cleanExpiredSessions() {
+        const now = Date.now();
+        for (const [id, session] of this.sessions) {
+            if (now > session.expiresAt) {
+                this.sessions.delete(id);
+            }
+        }
+    }
+    clear() {
+        this.records.clear();
+        this.sessions.clear();
+    }
+}
+exports.OpaqueStore = OpaqueStore;
+//# sourceMappingURL=opaque-store.js.map

package/dist/lib/problem.d.ts

@@ -15,6 +15,7 @@ export declare const PROBLEM_TITLES: Readonly<{
     "rate-limited": "Too Many Requests";
     "request-error": "Bad Request";
     "internal-error": "Internal Server Error";
+    conflict: "Conflict";
 }>;
 export type ProblemSlug = keyof typeof PROBLEM_TITLES;
 export interface Problem {

package/dist/lib/problem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"problem.d.ts","sourceRoot":"","sources":["../../src/lib/problem.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAkB,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAI5D,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAG/D,eAAO,MAAM,mBAAmB,gCAAgC,CAAC;AAGjE,eAAO,MAAM,cAAc;;;;;;;;;;;;;EAazB,CAAC;AAGH,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,cAAc,CAAC;AAGtD,MAAM,WAAW,OAAO;IAEtB,IAAI,EAAE,MAAM,CAAC;IAEb,KAAK,EAAE,MAAM,CAAC;IAEd,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,MAAM,CAAC;IAEf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;CAC9B;AAGD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;CAWjB,CAAC;AAGX,wBAAgB,OAAO,CACrB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,EACd,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACxC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAST;AAOD,wBAAgB,WAAW,CACzB,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,YAAY,CAGd;AAaD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAGD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAUD,MAAM,WAAW,WAAW;IAE1B,MAAM,EAAE,MAAM,CAAC;IAEf,IAAI,EAAE,WAAW,CAAC;IAElB,MAAM,EAAE,MAAM,CAAC;IAEf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAwFD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAU1D;AAOD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAoBlE"}
+{"version":3,"file":"problem.d.ts","sourceRoot":"","sources":["../../src/lib/problem.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAkB,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAI5D,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAG/D,eAAO,MAAM,mBAAmB,gCAAgC,CAAC;AAGjE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;EAczB,CAAC;AAGH,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,cAAc,CAAC;AAGtD,MAAM,WAAW,OAAO;IAEtB,IAAI,EAAE,MAAM,CAAC;IAEb,KAAK,EAAE,MAAM,CAAC;IAEd,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,MAAM,CAAC;IAEf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;CAC9B;AAGD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;CAWjB,CAAC;AAGX,wBAAgB,OAAO,CACrB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,EACd,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACxC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAST;AAOD,wBAAgB,WAAW,CACzB,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,YAAY,CAGd;AAkBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAGD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAcD,MAAM,WAAW,WAAW;IAE1B,MAAM,EAAE,MAAM,CAAC;IAEf,IAAI,EAAE,WAAW,CAAC;IAElB,MAAM,EAAE,MAAM,CAAC;IAEf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAwFD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAU1D;AAOD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAoBlE"}

package/dist/lib/problem.js

@@ -25,6 +25,7 @@ exports.PROBLEM_TITLES = Object.freeze({
     "rate-limited": "Too Many Requests",
     "request-error": "Bad Request",
     "internal-error": "Internal Server Error",
+    conflict: "Conflict",
 });
 exports.PROBLEM_SCHEMA = {
     type: "object",
@@ -60,6 +61,11 @@ const CRYPTO_INPUT_CODES = new Set([
     "INVALID_CIPHERTEXT",
     "AUTH_FAILED",
     "INVALID_INPUT",
+    "OPAQUE_ENVELOPE_RECOVERY",
+    "OPAQUE_SERVER_AUTHENTICATION",
+    "OPAQUE_CLIENT_AUTHENTICATION",
+    "OPAQUE_DESERIALIZE",
+    "OPAQUE_INVALID_INPUT",
 ]);
 function cryptoErrorStatus(code) {
     return CRYPTO_INPUT_CODES.has(code) ? 400 : 500;
@@ -71,6 +77,10 @@ const KEY_STORE_SLUGS = {
     KEY_NOT_FOUND: "key-not-found",
     KEY_ALGORITHM_MISMATCH: "key-algorithm-mismatch",
     KEY_STORE_FULL: "key-store-full",
+    STORAGE_KEY_REQUIRED: "internal-error",
+    KEY_INTEGRITY_FAILED: "internal-error",
+    KEY_CORRUPTED: "internal-error",
+    UNSUPPORTED_STORAGE_ALGORITHM: "internal-error",
 };
 function fieldOf(issue) {
     const missing = issue.params.missingProperty;

package/dist/routes/v1/decrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decrypt.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/decrypt.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;yBA2C/B,KAAK,eAAe,KAAG,IAAI;AAA3C,wBA+BE"}
+{"version":3,"file":"decrypt.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/decrypt.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;yBA2C/B,KAAK,eAAe,KAAG,IAAI;AAA3C,wBAkCE"}

package/dist/routes/v1/decrypt.js

@@ -37,7 +37,10 @@ const decryptSchema = {
     },
 };
 exports.default = (app) => {
-    app.post("/v1/decrypt", { schema: decryptSchema }, async (request, reply) => {
+    app.post("/v1/decrypt", {
+        schema: decryptSchema,
+        config: { rateLimit: { max: 100, timeWindow: "1 minute" } },
+    }, async (request, reply) => {
         try {
             const body = request.body;
             const v = (0, route_helpers_1.collectValidation)({

package/dist/routes/v1/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/verify.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;yBAuC/B,KAAK,eAAe,KAAG,IAAI;AAA3C,wBAiCE"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/verify.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;yBAuC/B,KAAK,eAAe,KAAG,IAAI;AAA3C,wBAoCE"}

package/dist/routes/v1/verify.js

@@ -29,7 +29,10 @@ const verifySchema = {
     },
 };
 exports.default = (app) => {
-    app.post("/v1/verify", { schema: verifySchema }, async (request, reply) => {
+    app.post("/v1/verify", {
+        schema: verifySchema,
+        config: { rateLimit: { max: 100, timeWindow: "1 minute" } },
+    }, async (request, reply) => {
         try {
             const body = request.body;
             const v = (0, route_helpers_1.collectValidation)({

package/dist/routes/v2/hpke.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyInstance } from "fastify";
+export default function hpkeRoute(app: FastifyInstance): void;
+//# sourceMappingURL=hpke.d.ts.map

package/dist/routes/v2/hpke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hpke.d.ts","sourceRoot":"","sources":["../../../src/routes/v2/hpke.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AA0L/C,MAAM,CAAC,OAAO,UAAU,SAAS,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAI5D"}

package/dist/routes/v2/hpke.js

@@ -0,0 +1,168 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = hpkeRoute;
+const route_helpers_1 = require("../../utils/route-helpers");
+const keys_1 = require("../../utils/keys");
+const loadHpke = async () => await Promise.resolve().then(() => __importStar(require("@sebastienrousseau/crypto-lib/modern")));
+function ensureHex(text) {
+    const isHex = /^[0-9a-fA-F]*$/.test(text) && text.length % 2 === 0;
+    return isHex ? text : Buffer.from(text, "utf8").toString("hex");
+}
+const KEYGEN_SCHEMA = {
+    tags: ["HPKE"],
+    summary: "Generate a server-held HPKE key pair (classical or post-quantum hybrid)",
+    body: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+            kem: {
+                type: "string",
+                enum: ["x25519", "p256", "x25519-ml-kem-768"],
+                default: "x25519-ml-kem-768",
+            },
+        },
+    },
+};
+const SEAL_SCHEMA = {
+    tags: ["HPKE"],
+    summary: "Encrypt (seal) a message using HPKE (RFC 9180)",
+    body: {
+        type: "object",
+        required: ["recipientPublicKey", "plaintext"],
+        additionalProperties: false,
+        properties: {
+            recipientPublicKey: { type: "string", minLength: 1 },
+            plaintext: { type: "string", minLength: 1 },
+            kem: { type: "string", enum: ["x25519", "p256", "x25519-ml-kem-768"] },
+            aead: { type: "string", enum: ["chacha20-poly1305", "aes-128-gcm"] },
+            info: { type: "string" },
+            aad: { type: "string" },
+            psk: { type: "string" },
+            pskId: { type: "string" },
+        },
+    },
+};
+const OPEN_SCHEMA = {
+    tags: ["HPKE"],
+    summary: "Decrypt (open) an HPKE ciphertext with a server-held key",
+    body: {
+        type: "object",
+        required: ["keyId", "encapsulatedKey", "ciphertext"],
+        additionalProperties: false,
+        properties: {
+            keyId: keys_1.KEY_ID_SCHEMA,
+            encapsulatedKey: { type: "string", minLength: 1 },
+            ciphertext: { type: "string", minLength: 1 },
+            aead: { type: "string", enum: ["chacha20-poly1305", "aes-128-gcm"] },
+            info: { type: "string" },
+            aad: { type: "string" },
+            psk: { type: "string" },
+            pskId: { type: "string" },
+        },
+    },
+};
+function registerKeygen(app) {
+    app.post("/v2/hpke/keygen", { schema: KEYGEN_SCHEMA }, async (request, reply) => {
+        const { hpkeGenerateKeyPair } = await loadHpke();
+        const { kem } = request.body;
+        const kp = hpkeGenerateKeyPair(kem);
+        const stored = await (0, keys_1.storeKey)(request, kem, { publicKey: kp.publicKey }, { privateKey: kp.privateKey });
+        return reply.send({ data: (0, keys_1.publicView)(stored) });
+    });
+}
+function registerSeal(app) {
+    app.post("/v2/hpke/seal", { schema: SEAL_SCHEMA }, async (request, reply) => {
+        try {
+            const { hpkeSeal } = await loadHpke();
+            const b = request.body;
+            const hexPlaintext = ensureHex(b.plaintext);
+            const res = hpkeSeal({
+                recipientPublicKey: b.recipientPublicKey,
+                plaintext: hexPlaintext,
+                suite: {
+                    kem: b.kem ?? "x25519-ml-kem-768",
+                    aead: b.aead ?? "chacha20-poly1305",
+                },
+                ...(b.info ? { info: ensureHex(b.info) } : {}),
+                ...(b.aad ? { aad: ensureHex(b.aad) } : {}),
+                ...(b.psk && b.pskId ? { psk: { psk: b.psk, pskId: b.pskId } } : {}),
+            });
+            return reply.send({ data: res });
+        }
+        catch (error) {
+            return (0, route_helpers_1.classifyCryptoError)(error, request, reply, "Encryption");
+        }
+    });
+}
+function registerOpen(app) {
+    app.post("/v2/hpke/open", {
+        config: { rateLimit: { max: 100, timeWindow: "1 minute" } },
+        schema: OPEN_SCHEMA,
+    }, async (request, reply) => {
+        const b = request.body;
+        const key = await (0, keys_1.resolveKey)(request, b.keyId, [
+            "x25519-ml-kem-768",
+            "x25519",
+            "p256",
+        ]);
+        try {
+            const { hpkeOpen } = await loadHpke();
+            const res = hpkeOpen({
+                recipientPrivateKey: key.privateParts["privateKey"],
+                encapsulatedKey: b.encapsulatedKey,
+                ciphertext: b.ciphertext,
+                suite: {
+                    kem: key.algorithm,
+                    aead: b.aead ?? "chacha20-poly1305",
+                },
+                ...(b.info ? { info: ensureHex(b.info) } : {}),
+                ...(b.aad ? { aad: ensureHex(b.aad) } : {}),
+                ...(b.psk && b.pskId ? { psk: { psk: b.psk, pskId: b.pskId } } : {}),
+            });
+            const utf8 = Buffer.from(res.plaintext, "hex").toString("utf8");
+            return reply.send({ data: { plaintext: utf8, hex: res.plaintext } });
+        }
+        catch (error) {
+            return (0, route_helpers_1.classifyCryptoError)(error, request, reply, "Decryption");
+        }
+    });
+}
+function hpkeRoute(app) {
+    registerKeygen(app);
+    registerSeal(app);
+    registerOpen(app);
+}
+//# sourceMappingURL=hpke.js.map

package/dist/routes/v2/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/v2/index.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;yBAqB/B,KAAK,eAAe,KAAG,IAAI;AAA3C,wBAmBE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/v2/index.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;yBAwB/B,KAAK,eAAe,KAAG,IAAI;AAA3C,wBAsBE"}

package/dist/routes/v2/index.js

@@ -21,6 +21,9 @@ const keys_1 = __importDefault(require("./keys"));
 const multi_recipient_1 = __importDefault(require("./multi-recipient"));
 const compliance_1 = __importDefault(require("./compliance"));
 const stream_1 = __importDefault(require("./stream"));
+const opaque_1 = __importDefault(require("./opaque"));
+const hpke_1 = __importDefault(require("./hpke"));
+const kms_1 = __importDefault(require("./kms"));
 exports.default = (app) => {
     (0, algorithms_1.default)(app);
     (0, compliance_1.default)(app);
@@ -40,5 +43,8 @@ exports.default = (app) => {
     (0, key_wrap_1.default)(app);
     (0, keys_1.default)(app);
     (0, multi_recipient_1.default)(app);
+    (0, opaque_1.default)(app);
+    (0, hpke_1.default)(app);
+    (0, kms_1.default)(app);
 };
 //# sourceMappingURL=index.js.map